Although not strictly for forensic purposes, visualization tools such as the ones discussed here can be very useful for visualizing large data sets. As forensic practitioners need to process more and more data, it is likely that some of the techniques implemented by these tools will need to be adopted.

+

; [[DeepSpar Disk Imager]]

−

+

[[Image:DeepSpardiskimager.jpg]],

−

+

:An independently written review of the DeepSpar Disk Imager written by Mike Montgomery of MJM Data Recovery in the UK is available at: http://www.deepspar.com/mjm-ds-disk-imager.html

−

=Open Source Visualization Toolkits=

+

:The whitepaper "Disk Imaging: A Vital Step in Data Recovery" is available to download from: http://www.deepspar.com/pdf/DeepSparDiskImagingWhitepaper3.pdf.

: C++ multi-platform with interfaces available for Tcl/Tk, Java and Python. Professional support provided by [http://www.kitware.com/ Kitware].

+

−

+

−

; [http://www.graphviz.org/ Graphviz]

+

−

: Originally developed by the [http://public.research.att.com/areas/visualization/ AT&T Information Visualization Gorup], designed for drawing connected graphs of nodes and edges. Neato is a similar system but does layout based on a spring model. Can produce output as PostScript, PNG, GIF, or as an annotated graph file with the locations of all of the objects---ideal for drawing in a GUI. Runs from the command line on Unix, Windows and Mac, although there is also a [http://www.pixelglow.com/graphviz/ MacOS GUI version].

+

−

+

−

; [http://www.opendx.org/ OpenDX]

+

−

: Based on IBM's Visualizaiton Data Explorer, runs on Unix/X/Motif.

+

−

+

−

+

−

; [http://www.ssec.wisc.edu/~billh/visad.html#intro VisAD]

+

−

: A Java component library for interactive and collaborative visualization.